A METHOD AND SYSTEM FOR USING MULTIPLE SMARTCARDS 
IN A READER 
Technical Field of the Invention 

The present invention relates to a method and system for using multiple 
5 smartcards in a smartcard reader. The present invention also relates to a method and 
apparatus for interfacing between an application and a single smartcard reader. 
Additionally, the present invention relates to a computer readable medium comprising a 
computer program for interfacing between an application and a single card reader. 
Background Art 

10 Smartcards have become increasingly popular in recent years. Smartcards are 

currently used for various purposes including initiating a new session with a device or 
application program. In many applications the insertion of a controlling smartcard, or the 
first use of this smartcard after insertion, is a signal to start a new session. When it 
involves initiating an application, this may be from the card itself or from the computer 

15 system that the smartcard reader is connected to, either directly, or via the network. 

While a smartcard is inserted in the reader, a running application may request 
data that is on another smartcard or require operations to be performed using another 
smartcard. This is often supported with the provision of a second reader for the data. For 
example, many handheld units for smartcards or credit cards, which are used at a point- 

20 of-sale have a reader in a compartment on the back in which a card associated with the 
salesperson is placed throughout their shift. During this shift, cards of various customers 
are placed into a reader on the front of the unit. During each transaction, information is 
read from both the front reader and the back reader. 

Typically, where the reading of two cards is required to perform an operation, it 

25 is not usual for the same reader mechanism to be used for both cards. Instead, two 
readers are often used. In some cases (such as the point-of-sale example given above), 
this is because of the inconvenience of continually swapping cards. In other cases, such 
as a card-controlled photocopier or a payphone, this is because the ejection of the 
controlling smartcard from its reader is a signal to terminate the current session. This is a 

30 disadvantage in situations where cost is important or space does not permit the use of two 
readers. 
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In addition, memory real estate on smartcards is expensive, and this mitigates 
against use of smartcards for cost-sensitive user interface applications, particularly since 
this type of user interface is typically a "throwaway" type of device. 

Summary of the Invention 
5 It is an object of the present invention to substantially overcome, or at least 

ameliorate, one or more disadvantages of existing arrangements. 

According to one aspect of the invention, there is provided a method of using 
multiple smartcards with a single reader, wherein the method comprises; initiating a 
session of an application when a first smartcard associated with the application is inserted 
10 into the reader; maintaining said session active when the first smartcard is removed from 
the reader and a second smartcard associated with the first smartcard is to be inserted in 
the reader; and performing an action when a said second smartcard is inserted in the 
reader. 

According to another aspect of the invention, there is provided a system for 

15 using multiple smartcards, wherein the system comprises: a single card reader; a 
processing device having a controlling program operating therein; communication means 
for communicating between said single card reader and said processor, wherein said 
controlling program comprises: means for initiating a session of an application when a 
first smartcard associated with the application is inserted into the reader; means for 

20 maintaining said session active when the first smartcard is removed from the reader and a 
second smartcard associated with the first smartcard is to be inserted in the reader; and 
means for performing an action when a said second smartcard is inserted in the reader. 

According to another aspect of the invention, there is provided a computer 
readable medium comprising a computer program for interfacing between an application 

25 and a single smartcard reader, wherein the computer program comprises: means for 
initiating a session of an application when a first smartcard associated with the 
application is inserted into the reader; means for maintaining said session active when the 
first smartcard is removed from the reader and a second smartcard associated with the 
first smartcard is to be inserted in the reader; and means for performing an action when a 

30 said second smartcard is inserted in the reader. 

According to another aspect of the invention, there is provided a method of 
interfacing between an application and a single smartcard reader, wherein the method 
comprises: initiating a session of an application when a first smartcard associated with the 
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application is inserted into the reader and a controlling program operating on a processing 
device is in a first mode; terminating the session of the application when the first 
smartcard is removed from the reader and the controlling program operating on said 
processing device is in the first mode; changing the operation of the controlling program 
5 from the first mode to a second mode in response to a message from the session of the 
application that one or more second smartcards associated with the application is able to 
be inserted in the reader; waiting for a said second smartcard associated with the 
application to be inserted in the reader when the first smartcard is removed from the 
reader and the controlling program is in a second mode; and passing data from a said 
10 second smartcard to the application when the said second smartcard is inserted in the 
reader and the controlling program is in a second mode. 

According to another aspect of the invention, there is provided apparatus for 
interfacing between an application and a single smartcard reader, wherein the apparatus 
comprises: means for initiating a session of an application when a first smartcard 
15 associated with the application is inserted into the reader and a controlling program 
operating on a processing device is in a first mode; means for terminating the session of 
the application when the first smartcard is removed from the reader and the controlling 
program operating on said processing device is in the first mode; means for changing the 
operation of the controlling program from the first mode to a second mode in response to 
20 a message from the session of the application that one or more second smartcards 
associated with the application is able to be inserted in the reader; means for waiting for a 
said second smartcard associated with the application to be inserted in the reader when 
the first smartcard is removed from the reader and the controlling program is in a second 
mode; and means for passing data from a said second smartcard to the application when 
25 the said second smartcard is inserted in the reader and the controlling program is in a 
second mode. 

According to another aspect of the invention, there is provided a computer 
readable medium comprising a computer program for interfacing between an application 
and a single smartcard reader, wherein the computer program comprises: means for 
30 initiating a session of an application when a first smartcard associated with the 
application is inserted into the reader and a controlling program operating on a processing 
device is in a first mode; means for terminating the session of the application when the 
first smartcard is removed from the reader and the controlling program operating on said 
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processing device is in the first mode; means for changing the operation of the controlling 
program from the first mode to a second mode in response to a message from the session 
of the application that one or more second smartcards associated with the application is 
able to be inserted in the reader; means for waiting for a said second smartcard associated 
with the application to be inserted in the reader when the first smartcard is removed from 
the reader and the controlling program is in a second mode; and means for passing data 
from a said second smartcard to the application when the said second smartcard is 
inserted in the reader and the controlling program is in a second mode. 

According to another aspect of the invention, there is provided a method of using 
multiple smartcards in a system comprising a processing device and a single card reader 
communicating therewith, wherein the method comprises: initiating a session of an 
application when a first smartcard associated with the application is inserted into the 
reader and a controlling program operating on said processing device is in a first mode; 

terminating the session of the application when the first smartcard is removed 
from the reader and the controlling program operating on said processing device is in the 
first mode; changing the operation of the controlling program from the first mode to a 
second mode in response to a message from the session of the application that one or 
more second smartcards associated with the application is able to be inserted in the 
reader; waiting for a said second smartcard associated with the application to be inserted 
in the reader when the first smartcard is removed from the reader and the controlling 
program is in a second mode; and performing an action when a said second smartcard is 
inserted in the reader and the controlling program is in a second mode. 

According to another aspect of the invention, there is provided a system for 
using multiple smartcards, wherein the system comprises: a single card reader; a 
processing device having a controlling program operating therein; communication means 
for communicating between said single card reader and said processor, wherein said 
processing device comprises: means for initiating a session of an application when a first 
smartcard associated with the application is inserted into the reader and the controlling 
program operating on said processing device is in a first mode; means for terminating the 
session of the application when the first smartcard is removed from the reader and the 
controlling program operating on said processing device is in the first mode; means for 
changing the operation of the controlling program from the first mode to a second mode 
in response to a message from the session of the application that one or more second 
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smartcards associated with the application is able to be inserted in the reader; means for 
waiting for a said second smartcard associated with the application to be inserted in the 
reader when the first smartcard is removed from the reader and the controlling program 
is in a second mode; and means for performing an action when a said second smartcard is 
5 inserted in the reader and the controlling program is in a second mode. 

According to another aspect of the invention, there is provided a method of using 
multiple smartcards, aggregated into a lesser plurality of groups of said smartcards, said 
method comprising the steps of: (a) inserting a first smartcard into a smartcard reader; (b) 
reading and storing, if said first smartcard is a base smartcard, (i) an identity for a group, 

10 (ii) an identity of the base smartcard, (iii) an interface description for the base smartcard, 
(iv) an identity for at least one associated member card, and (v) an interface description 
for said at least one associated member card; (c) ejecting the first smartcard from the 
smartcard reader and inserting a second smartcard therein, said smartcard reader making 
accessible a user selectable icon, having an associated action, on a surface of the inserted 

15 second smartcard; (d) reading, if said second inserted smartcard is a member card 
associated with said base smartcard, of (i) said identity of said group, to which said 
second inserted smartcard is associated, and (ii) an identity of the inserted associated 
member smartcard; (e) comparing the group identity read from the first smartcard to the 
group identity read from the second smartcard; and (f) enabling, because said compared 

20 group identities match, the associated action if a user selects the user selectable icon, 
whereby the association between the icon and the action is defined by the interface 
description for the associated member smartcard read and stored from the associated base 
smartcard. 

According to another aspect of the invention, there is provided a method for 
25 enabling smartcard initiated actions associated with a group of smartcards comprising a 
base smartcard and at least one associated member smartcard, said method comprising 
steps of: inserting the base smartcard into a smartcard reader; reading of base smartcard 
data and first data for the associated member smartcard form the inserted base smartcard; 
inserting the member smartcard into the smartcard reader; reading of second data from 
30 the inserted member smartcard; and enabling a smartcard initiated action associated with 
the member smartcard dependent upon a correspondence between the first data and the 
second data. 
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According to another aspect of the invention, there is provided apparatus for 
using multiple smartcards, aggregated into a lesser plurality of groups of said smartcards, 
said apparatus comprising: means for reading and storing from a first smartcard, if said 
first smartcard is a base smartcard, (i) an identity for a group, (ii) an identity of the base 

5 smartcard, (iii) an interface description for the base smartcard, (iv) an identity for at least 
one associated member card, and (v) an interface description for said at least one 
associated member card; means for reading from a second smartcard, if said second 
smartcard is a member card associated with said base smartcard, of (i) said identity of 
said group, to which said second inserted smartcard is associated, and (ii) an identity of 

10 the inserted associated member smartcard; means for comparing the group identity read 
from the first smartcard to the group identity read from the second smartcard; and means 
for enabling an action associated with a user selectable icon, if said compared group 
identities match, and if a user selects said user selectable icon, whereby the association 
between the icon and the action is defined by the interface description for the associated 

15 member smartcard read and stored from the associated base smartcard. 

According to another aspect of the invention, there is provided apparatus for 
enabling smartcard initiated actions associated with a group of smartcards comprising a 
base smartcard and at least one associated member smartcard, said apparatus comprising: 
means for reading of base smartcard data and first data for said at least one associated 

20 member smartcard form a base smartcard inserted in a smartcard reader; means for 
reading of second data from a said member smartcard inserted in a smartcard reader; and 
enabling a smartcard initiated action associated with the member smartcard dependent 
upon a correspondence between the first data and the second data. 

According to another aspect of the invention, there is provided a computer 

25 readable medium comprising a computer program for interfacing between multiple 
smartcards, aggregated into a lesser plurality of groups of said smartcards, said computer 
program comprising: means for reading and storing from a first smartcard, if said first 
smartcard is a base smartcard, (i) an identity for a group, (ii) an identity of the base 
smartcard, (iii) an interface description for the base smartcard, (iv) an identity for at least 

30 one associated member card, and (v) an interface description for said at least one 
associated member card; means for reading from a second smartcard, if said second 
smartcard is a member card associated with said base smartcard, of (i) said identity of 
said group, to which said second inserted smartcard is associated, and (ii) an identity of 



the inserted associated member smartcard; means for comparing the group identity read 
from the first smartcard to the group identity read from the second smartcard; and means 
for enabling an action associated with a user selectable icon, if said compared group 
identities match, and if a user selects said user selectable icon, whereby the association 
5 between the icon and the action is defined by the interface description for the associated 
member smartcard read and stored from the associated base smartcard. 

According to another aspect of the invention, there is provided a computer 
readable medium comprising a computer program for interfacing between multiple 
smartcards, aggregated into a lesser plurality of groups of said smartcards, said computer 

10 program comprising: means for reading of base smartcard data and first data for said at 
least one associated member smartcard form a base smartcard inserted in a smartcard 
reader; means for reading of second data from a said member smartcard inserted in a 
smartcard reader; and enabling a smartcard initiated action associated with the member 
smartcard dependent upon a correspondence between the first data and the second data. 

15 According to another aspect of the invention, there is provided a base smartcard 

of one or more associated member smartcards, wherein said base smartcard and said one 
or more member smartcards forming a group of smartcards, each said base or member 
smartcard comprising memory storage having stored therein a common group number 
identifying said group and a number identifying said smartcard, and each said member 

20 smartcard comprising an interface for user interaction, wherein said memory storage of 
the base smartcard having further stored therein interface descriptions of each member 
smartcard. 

According to another aspect of the invention, there is provided a member 
smartcard associated with a base smartcard, wherein said base smartcard and said 
25 member smartcard forming a group of smartcards, each said base or member smartcard 
comprising memory storage having stored therein a common group number identifying 
said group and a number identifying said smartcard, and said member smartcard 
comprising an interface for user interaction, wherein said memory storage of the base 
smartcard having further stored therein interface descriptions of said member smartcard. 
30 Brief Description of the Drawings 

A number of embodiments of the present invention will now be described with 
reference to the drawings, in which: 

Fig. 1 is a perspective view of a smartcard and a smartcard reader; 
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Figs. 2-4 are each views of the reverse side of different smartcards; 
Fig. 5 is a longitudinal cross-sectional view through the line V-V of Fig. 2; 
Fig. 6 is a schematic perspective view of all the items of equipment, which go to 
make up the system; 

5 Fig. 7A shows a process flow diagram from the perspective of the card reader 

into which a smartcard as described is inserted; 

Fig. 7B shows in more detail the processes of steps 702 to 712 of Fig. 7A; 
Fig. 7C shows a process flow diagram from the perspective of the application 
associated with a smartcard as described; 
10 Fig. 8 shows a flow chart of a method of using multiple smartcards on a single 

card reader; 

Fig. 9 shows a schematic block diagram of the system for implementing the 
method of Fig. 8; 

Figs. 10A and 10B show a control flow diagram of the session manager of 

15 Fig. 9; 

Fig. 11 shows a block diagram representation of a system for using multiple 
smartcards; 

Fig. 12 shows a flowchart of a method of using multiple smartcards in 
accordance with the further embodiment, and 
20 Fig. 13 shows a block diagram of a general-purpose computer suitable for 

implementing the preferred methods of Fig. 8, 9, 10A and 10B or Fig 12. 

Detailed Description including Best Mode 
Where reference is made in any one or more of the accompanying drawings to 
steps and/or features, which have the same reference numerals, those steps and/or features 
25 have for the purposes of this description the same function(s) or operation(s), unless the 
contrary intention appears. 

The principles of the method(s) described herein have general applicability to 
smartcards in general. However, for ease of explanation, the steps of the method(s) are 
described with reference to smartcard interface systems in which a single application has 
30 multiple interface cards. Smartcards used in such systems have a large number of fields 
of use due to the customisable nature of the user interface. However, it is not intended 
that the present invention be limited to these described smartcards and systems. For 
example, the invention may include applications where one or more of the multiple cards 



used are "standard smartcards". The "standard smartcard" typically does not have a user 
operable interface on the card itself. The terms "smartcards" and "cards" are used herein 
interchangeably. 

In Fig. 1, there is illustrated a smartcard reader 1 having a housing 2 in which is 
5 formed a bay 4 and a viewing area 6. Data reading means are provided in the form of 
exposed reader contacts 7 and associated control circuitry (not illustrated). The smartcard 
reader 1 also includes key means in the form of a substantially transparent pressure 
sensitive membrane 3, which covers the viewing area 6. The smartcard reader 1 is 
configured for use with a smartcard 10 which has a planar, preferably laminar, substrate 
10 12 with a plurality of indicia 13 on its front face. As best seen in Fig. 5 the indicia 13 can 
be applied by printing, by adhering, or any other conventional process. As also seen in 
Fig. 5, the smartcard 1 includes an electronic memory in the form of an on-board memory 
chip 15 which is connected with card contacts 16 which cooperate with the reader 
contacts 7. 

15 In use, the smartcard 10 is inserted into the bay 4 with its front face 1 1 facing 

towards the pressure sensitive membrane 3. As a consequence the pressure sensitive 
membrane 3 covers the front face 11 but the control indicia 13 are visible within the 
viewing area 6 because the pressure sensitive membrane 3 is transparent. 

The reader contacts 7 and associated circuitry are configured to read mapping 

20 data associated with the control indicia 13 stored in the memory chip 15. This reading 
can take place either automatically upon insertion of the smartcard 10 into the bay 4 or 
selectively in response to a signal from the smartcard reader 1. This read signal can, for 
example, be transmitted to the smartcard reader 1 via the exposed reader contacts 7 and 
card contacts 16. 

25 Once the mapping data associated with the indicia 13 has been read, a user can 

press areas of the pressure sensitive membrane 3 overlying or immediately adjacent to the 
underlying indicia 13. By sensing the pressure on the pressure sensitive membrane 3, and 
referring to the mapping data, the smartcard reader 1 can deduce which of the indicia 13 
the user has pressed. In this way, although the indicia 13 have no mechanical or electrical 

30 function, when placed under the transparent pressure sensitive membrane 3, the indicia 
effectively become keys operable by the user and the function of the key is determined by 
the mapping data. 
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In its preferred form, the smartcard reader 1 includes a transceiver, which utilises 
an aerial 5 for transmitting and receiving radio frequencies. The transceiver circuit is not 
illustrated but is of conventional form but it will be understood by those skilled in the art 
that an infra-red transmitter or other forms of data transmission, including hard wiring, 
5 can be used. 

Upon selection of one of the indicia 13, the smartcard reader 1 causes 
information related to the selection to be transmitted via the aerial 5 to a set top box 21 
(Fig. 6) which includes a corresponding aerial and associated transceiver 25. Thus in the 
preferred form, information can be transmitted between the set top box 21 and the 

10 smartcard reader 1 in both directions and can include, for example, hand shaking data, set 
up information, or any other form of information desired to be transferred between the 
two devices. Alternatively, the smartcard reader 1 causes information related to the 
selection to be transmitted via the aerial 5 to a PC 31 which includes a corresponding 
aerial and associated transceiver 25. Thus in this variation, information can be 

15 transmitted between the PC 31 and smartcard reader 1 in both directions. 

Turning now to Fig. 3, there is shown an alternative arrangement 100 to the 
smartcard 10 of Figs. 1 and 2. In the smartcard 100 indicia 13 are (as before) provided on 
the front face (not illustrated in Fig. 3). However the memory storage for the smartcard 
100 takes the form of a magnetic strip 115 formed along the rear face 114 of the 

20 smartcard 100. The mapping data and any other information, which is stored in the 
magnetic strip 115 is stored in conventional manner. The smartcard reader (not 
illustrated) which is adapted to cooperate with the smartcard 100 includes a magnetic read 
head positioned at, or adjacent, the corresponding bay of the reader. As the control card 
100 is inserted into the bay the mapping data is automatically read from the magnetic 

25 strip 1 1 5 by the magnetic read head. In all other respects the magnetic card reader for the 
smartcard 100 is then operated as described in relation to the arrangement of Fig. 1. 

Fig. 4 shows another arrangement of a smartcard 200 in which the storage means 
takes the form of a machine-readable bar code 215 printed on the rear face 214 of the 
smartcard 200. The mapping data, etc is encoded within the bar code. The corresponding 

30 smartcard reader (not illustrated) for the smartcard 200 includes an optical read head 
positioned at, or adjacent, the entrance to the reader bay. As the smartcard 200 is slid into 
the bay, the mapping data, etc is automatically read from the bar code 215 by the optical 
read head. Alternatively, the bar code can be scanned using a bar code reader associated 
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with the smartcard reader immediately prior to inserting the smartcard, or can even be 
scanned by an internal bar code reader scanner once the smartcard 200 has been 
completely inserted into the smartcard reader. 

The present invention has been described herein with reference to specific 
5 storage means used in combination with a smartcard. However, it is not intended that the 
the smartcards of the present invention be limited to these described storage means. As 
will become apparent to the person skilled in the art, many other possible known storage 
means may be used in combination with the smartcard without departing from the spirit 
and the scope of the invention. 

10 Turning now to Fig. 6, components of a preferred system are illustrated, hi 

addition to the smartcard 10 (100 or 200) there is a smartcard programmer 30 which is 
connected to, and controlled by, a personal computer (PC) 31. When the smartcard 10, 
100, 200 is inserted in the smartcard programmer 30, data entered into the PC 31 can be 
used to program the memory chip 15, magnetic strip 115 or bar code 215. The system 

15 also comprises a smartcard reader 8 for reading the programmed smartcard 10 (100 or 
200). The smartcard reader 8 in response to a user selection of the indicia 13 on the 
smartcard 10 (100 or 200) causes information related to the selection to be conveyed to a 
set top box 21, such as a VCR or DVD unit via a corresponding aerial 25 and associated 
transceiver. The set top box 21 is coupled to a visual display unit 20, wherein the set top 

20 box 21 in conjunction with the display unit 20 is able to perform certain video operations 
in response to the user selection. Alternatively, the system may comprise a smartcard 
reader and PC 31 adapted to communicate with the smartcard reader 1 via a 
corresponding aerial and associated transceiver, wherein the PC 31 is able to perform 
certain operations in response to the user selection. As will become apparent from below, 

25 other variations of the system are possible without departing from the spirit or scope of 
the invention. 

Fig. 7A presents a process flow diagram from the perspective of the card reader 
into which a smartcard as described is inserted. In a process step 700 the card insertion is 
detected, whereafter in a process step 702, the card reader detects that the user has 
30 touched one of the designated regions. In the initial detection step 700, the card reader 
preferably retrieves from the smartcard memory, an unique identifier and address of the 
application associated with the card. In the following process step 704, the card reader 
makes reference to mapping information in order to identify the particular region pressed 
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by the user, whereafter in step 706 the command associated with the particular region in 
question is retrieved from a memory. In a process step 708, the particular command 
being requested through touching the specified region is sent to the application in 
question. 

5 The smartcard as described has stored in its memory a list of x-y coordinates and 

commands associated with the "buttons", "icons", and/or "regions" (viz the printed 
indicia) of the smartcard. For instance, each member of the list may have the syntax 
{TL,BR, "COMMAND" }, where TL and BR are the x-y coordinates of the top left hand 
corner and bottom right hand corner respectively of the associated "button" , "icon" or 

10 "region" on the smartcard, and where "COMMAND" is the associated command to be 
performed by pressing the associated "button", "icon", or "region" (ie printed indicia). 
Some examples of "COMMAND" may be load URL address, load application, or down 
load file etc. Preferably, the syntax allows multiple commands for each TL, BR 
coordinate. For instance, a member of the list may comprise in addition to a command 

15 designated by the "button", a further command for retrieving and playing a particular 
sound sample for feedback to the user as previously described. Preferably, the smartcard 
has also stored in its memory an unique identifier number. The latter information being 
automatically read by the reader upon insertion of the smartcard in the reader. 
Alternatively, the latter information may be read upon the user pressing the pressure 

20 sensitive membrane over a start "button" of the card. In a further variation, the list may 
instead be stored in memory in the set top box 21 or PC 31 together with its unique ID 
number. In the latter case, the smartcard need only store the unique ID number. 

Turning now to Fig. 7B, there is shown in more detail the processes of steps 702 
to 712 of Fig. 7A. In a process step 702, the card reader determines the x-y coordinates 

25 of the area on the smartcard, which has been pressed by the user. The process then 
continues to decision block 718, where a check is made by the card reader whether these 
pressed x-y coordinates match the coordinates TL, BR of a first member {TL, BR, 
"COMMAND"} of the list, which has been retrieved from memory in the smartcard. If 
the x-y coordinates pressed by the user do not match to the coordinates TL, BR of the first 

30 member then the decision block 718 returns false (no) and the process continues to 
decision block 720. In decision block 720, a check is made whether the current member 
of the list is the last member of the list. If the decision block 720 returns false (no) then 
the process continues to process step 722, where the card reader increments to the next 
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member of the list. Otherwise if the decision block 720 returns true (yes), the process 
then terminates awaiting further user input. The card reader, thus increments through the 
list, checking the TL, BR coordinates of each member against the pressed x-y coordinates 
until a match is found. If no match is found the process terminates. 
5 In the event the decision block 718 returns true (yes), that is if the pressed x-y 

coordinates match the TL, BR coordinates of a member {TL, BR, "COMMAND"} of the 
list, then the process continues to process step 724. Preferably, TL and BR define a 
region or area on the smartcard and a match is found when the x-y coordinates of the area 
pressed by the user fall or partly fall within the region or area defined by TL and BR. In 

10 the next process step 724, the card reader retrieves the "COMMAND" associated with the 
matched coordinates and then sends 726 the "COMMAND" to the particular application 
in question. The card reader already knows the unique identifier and address of the 
application from the initial detection of the card. After step 726, the process then 
terminates awaiting further user input. 

15 Fig. 7C presents a process flow diagram from the perspective of the application 

associated with a smartcard as described. There are many different configurations of 
applications suitable for use with the smartcards. For instance, the application can be 
located remotely on a server. Alternatively, it can also be located locally on a personal 
computer. The application can also be located in a set top box, such as a VCR. Also, the 

20 application can either be implemented as software or hardware. For instance, the card 
reader may send a series of bits to a TV to remotely change the channels. 

For the purposes of this specification, any reference hereinafter to a processing 
device is taken to include within its meaning a set top box (such as shown in Fig. 6), a PC 
(such as shown in Fig. 6), a remote server, ATM device, or any other device of 

25 computational ability, which is adapted to communicate with the smartcard reader and 
perform operations in response to user interaction with the smartcard and smartcard 
reader. Such a processing device preferably includes an input/output device for 
communicating with the smartcard reader 8. The processing device preferably also 
includes a microprocessor and memory coupled to the input/output device, the 

30 microprocessor being adapted to perform operations in response to user interaction with 
the smartcard and smartcard reader. 

Turning now to Fig. 7C, the process of the application that is currently running 
on the processing device is described. In the process step 750, the application receives a 
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"COMMAND" from the card reader corresponding to the "icon", "button" or "region" on 
the smartcard pressed by the user. The application in the next process step 752, performs 
the "COMMAND". For instance, the application can be an internet browser and the 
command "load a URL address". In another example, the application can be a telephone 
communications package in a telephone and the COMMAND is "Phone 999 9999". 

Preferably, the application is automatically executed once the card is inserted in 
the reader. In this embodiment, an overall controlling program receives a command 
"execute APPLICATION" (where the application is specified by an address) upon 
insertion of the card in the reader and subsequently executes the application. In a 
variation of this embodiment, the application is executed once the card is inserted in the 
reader and the user presses a "START" button on the smartcard. In a still further 
embodiment, the application is already running and waiting to receive commands from 
the reader. In the latter embodiment, upon insertion of the smartcard in the card reader, 
the card reader retrieves from the smartcard memory, a unique identifier associated with 
the card. It will be noted it is not necessary to store the address of the application on the 
smartcard as the application is already running. The overall controlling program, in the 
latter embodiment, then checks whether the unique ID corresponds to the ID of the 
already executing application and if not issues a warning signal, eg a audible beep. 

In a still further variation of the preferred embodiment, the mapping data 
together with a unique ID can be stored remotely on the processing device. In this 
variation, the storage means of the smartcard 10 (100 or 200) has instead of mapping 
data, a unique ED associated with the smartcard 10 (100 or 200) stored therein. Upon the 
initial reading of the smartcard 10 (100 or 200), this ED is passed from the smartcard 
reader 1 to the processing device. Once a user selects one of the indicia 13, the smartcard 
reader 1 causes locational data indicating the location of the pressed indicia to be passed 
to the processing device. The processing device checks whether the unique ID of the 
smartcard 10 (100 or 200) corresponds to the unique ID associated with the mapping data 
stored on the processing device. If the EDs do not correspond, the processing device 
recognizes that this smartcard 10 (100 or 200) is an inappropriate smartcard 10 (100 or 
200), and issues a warning such as an audible beep. On the other hand, if the EDs do 
correspond the processing device performs the command(s) associated with locational 
data. 
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For the purposes of this specification, any reference hereinafter to the term 
"session" refers to an instance of a software application intended for execution or already 
executing on a processing device. Furthermore, the reference to the term "initiating a 
session" includes within its scope but is not limited thereto: executing the software 
application, loading data into the software application for use in that session (eg loading a 
web page from the Internet or loading a video), resetting the state of the software 
application ( eg setting displayed variables to their default values), or some other form of 
session initiation. The reference to the term "terminating a session" includes within its 
scope but is not limited thereto: terminating the software application, loading default data 
into the software application, resetting the state of the software application, or some other 
form of session termination. 

Turning now to Fig. 8, there is shown a flow chart of a method of using multiple 
smartcards on a single card reader. A controlling smartcard 10 (100 or 200) has 
preferably stored in its memory storage means 15, 115, 215 a unique identifier of an 
application and optionally an address to the application, such as for example an internet 
home shopping program. The method commences 802 when the user inserts the 
controlling smartcard 10 (100 or 200) into the smartcard reader 8. When the controlling 
card is inserted into the smartcard reader 8, the reader automatically causes a session of 
the application to be initiated 804 on the processing device utilising the unique identifier 
of the application or optionally the address to the application. Alternatively, the session 
may be initiated 804 by the user pressing a Start "button" on the controlling smartcard 10 
(100 or 200), by the user pressing on the pressure sensitive region. Once the session has 
started the user is able to commence interaction with the program via the "buttons" on the 
controlling smartcard 10 (100 or 200). If the user is solely interacting with the 
application with the controlling smartcard, then the program runs until the user ejects 820 
the controlling smartcard 10 (100 or 200) from the reader 8 whereupon the session is 
terminated 822. However, the application in response to a user interaction may request 
further information from the user. For example, if the user wishes to buy something on 
the Internet home shopping program, the program may ask for a shipping address. In 
order to avoid having to provide a keyboard to enter the information, the information is 
held on a second smartcard 10 (or 100 or 200). 

Preferably as mentioned previously, each smartcard 10 (100 or 200) holds a 
unique identifier that labels it as corresponding to a particular application. When a 

546958US.doc 



- 16- 

controlling smartcard 10 (100 or 200) is inserted 802 into the reader 8, the unique 
identifier, such as "HomeShopping", causes an overall controlling program on the 
computer system to start 804 a session of the application indicated. The user may then 
commence user interaction 806 with the application. 

The application during this user interaction 806 checks in decision block 808 
whether the user has performed a particular user interaction. In a variation of this 
arrangement, the application may, instead of in response to an user interaction, 
automatically request and wait 810 for a second smartcard. In this case, the decision 
block 808 can be dispensed with. In the event the decision block 808 returns Yes 
(TRUE), the application proceeds to step 810, where the application requests and then 
waits for the insertion of the second smartcard 10 (100 or 200). The application, for 
instance the home shopping application, also sends during step 810 a message to the 
overall controlling program, naming the unique identifier of the second smartcard 10 (100 
or 200), say "Personallnfo". In this fashion, the overall controlling program is aware that 
a second smartcard has been requested and it knows the identity of the second smartcard. 
Consequently the change of the smartcard does not trigger a session change, i.e. the 
termination of the HomeShopping application and the starting of a Personallnfo 
application. The waiting step 810 may have a timeout period after which the session is 
terminated. After such a period, the insertion of a card would be treated as the insertion 
of a controlling card. 

After the user has inserted 818 the second smartcard 10 (100 or 200), the method 
proceeds to decision block 814. During decision block 814, the overall controlling 
program checks whether the unique identifier of the inserted second smartcard 10 (100 or 
200) is the same as the unique identifier of the requested smartcard currently stored by the 
overall controlling program. In the event, the decision block 814 returns No (FALSE), 
the method proceeds to decision block 816. During decision block 816, the overall 
controlling program checks whether the unique identifier of the inserted second smartcard 
10 (100 or 200) is the same as the unique identifier of the application currently stored by 
the overall controlling program. In the event the decision block 816 returns Yes (TRUE), 
the method returns to the application for further user interaction 806. On the other hand, 
if decision block 816 returns No (FALSE), the method returns to step 804. Namely, if the 
newly inserted smartcard is not the second or the controlling smartcard, the session is 
terminated and a new session corresponding to the new controlling card is started. In a 
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variation of this method, where the decision block 816 returns No (FALSE), the user is 
warned that the current session is to terminate and gives the user a chance to insert the 
correct card. If the user has not inserted the correct card within a predetermined period, 
the session is terminated and a new session corresponding to the new controlling card is 
commenced. On the other hand, if the decision block 814 returns Yes (TRUE), the 
method proceeds to step 812, where the application performs an action using the 
information stored on the second smartcard 10 (100 or 200). After completion of step 
812, the method returns to step 806 for further processing. In the event the decision block 
808 returns No (FALSE), that is the user has not performed the particular user interaction, 
the application continues operation with further user interaction. The application runs 
until the user ejects 820 the controlling smartcard 10 (100 or 200) from the reader 8 
whereupon the session is terminated 822. 

In this way, the method is able to distinguish those instances where the removal 
of a card is intended to signal the end of a session from those instances where the removal 
of a card is done in order to insert a different card required in the same session and hence 
leaving the current session active. 

Turning now to Fig. 9, there is shown a schematic block diagram of the system 
for implementing the method of Fig. 8. The system comprises a smartcard reader 8 
including a transceiver, a signal receiver 25, a session manager 906, an application 
execution environment 908, and a set of stored application programs 910. The session 
manager 906 is the overall controlling program described previously and runs on the 
aforementioned processing device. The stored applications 910 are executed in an 
execution environment 908 on a microprocessor in the aforementioned processing device. 
The applications may be stored locally on the processing device or remotely on a 
network. 

The smartcard reader 8 sends signals corresponding to card insertion, card 
removal, and card operations as discussed previously, which are received by the signal 
receiver 25. The session manager 906 communicates with the signal receiver 25 via an 
application programming interface such that it is notified of these card events by 
messages, namely card insertion, card removal, and card operations. The session 
manager 906 controls the loading, execution and termination of the applications in the 
application execution environment 908 and communicates with these applications, for 
example using inter-process communication. 
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The session manager 906 can be implemented using the following high level 
pseudo-code. This pseudo-code implementation of the session manager is depicted in 
Figs. 10A and 1 OB as a control flow diagram. For ease of explanation, the reference 
numerals in the following pseudo-code correspond to the reference numerals shown in 
Figs. 1 OA and 10B. 

Pseudo-code - Session Manager: 

(1) While power is on, repeat the following: 

(1.1) Wait for card insertion event from signal receiver. 

(1 .2) Determine application to execute from card insertion event. The data sent 
with the card insertion event comprises a name or unique identifier for the application. 

(1 .3) Load and execute store application in the application execution environment. 

(1 .4) While application is executing, repeat the following: 

(1.4.1) Wait for event from signal receiver or message from the executing 
application. 

(1.4.2) If card-removal event received, terminate application and exit this loop. 
Namely goto 1.1. 

(1.4.3) If card-operation event received, pass this card operation onto the 
executing application, for example by inter-process communication and goto 1.4.1. 

(1.4.4) If new-card request message received from application (with details of 
necessary criteria which the new card must match i.e ID), do the following: 

(1.4.4.1) Wait for card-removal event. The application would have prompted 
the user to remove the card and insert another card to be used by the executing 
application. 

(1.4.4.2) Repeat the following: 

(1 .4.4.2. 1 ) Wait for card-insertion event. 

(1 .4.4.2.2) If the new card does not match the criteria specified by the new 
card request message and is not the controlling card, exit this loop and the outer one 
and goto 1.2. The inserted card is treated as a new controlling card. In a further 
variation, the session manager would warn the user that the current application is to 
terminate and give the user an opportunity to insert the correct card. 

(1.4.4.2.3) If the new card is the controlling card associated with the 
executing application, exit this loop and goto 1 .4.1 . 

(1.4.4.2.4) If the new card matches the requested criteria, repeat the 

following: 
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(1.4.4.2.4.1) Wait for event from the signal receiver or message from 

the application. 

(1.4.4.2.4.2) If card-operation received, pass this card operation on to 
the executing application by, for example, inter-process communication. 

5 (1.4.4.2.4.3) If card removal event received, exit this loop and goto 

1.4.4.2.1. 

(1.4.4.2.4.4) If a card-completed message is received from the 
executing application, exit this loop and goto 1.4.1 

10 The session manager 906 effectively operates in two modes. In the first mode, if 

a card insertion event is detected the corresponding application is loaded and executed, 
while if a card removal event is detected the application is terminated. In the second 
mode, if a card removal event is detected following receipt of a new card requested 
message, the application is not terminated but waits for the insertion of a second 

15 smartcard. If a card insertion event is detected following receipt of a new card requested 
message, and the newly inserted card satisfies the criterion specified, the session manager 
906 will read the newly inserted second smartcard. 

Although the above pseudo-code discusses card-insertion events and card- 
removal events, these events may not correspond with signals sent from the reader to the 

20 receiver. The session manager can infer these events by examining the card-operation 
events and determining whether consecutive operations have come from the same card or 
not. 

The method described with reference to Fig. 8 is concerned with executing an 
application upon insertion of the controlling card. In a variation of this method, the 

25 application is running prior to the insertion of the controlling card. That is, the 
application is continually operating during the power on the processing device, prior to 
the insertion and after the removal of the controlling card. When the controlling card is 
first inserted, this variation of the method checks whether the unique identifier of the 
controlling card corresponds to the unique identifier of the application. If the IDs 

30 correspond, the method commences a session of the application. Otherwise, the method 
warns that the current session will terminate and gives the user a chance to insert the 
correct card. In the event the IDs correspond, this variant method then proceeds with 
steps 806 through to 820. After step 820, the variant terminates the current session. 
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The session manager 906 effectively operates in two modes. In this variation of 
the method, the session manager 906 is modified to take into account these changes. 
Notwithstanding, the session manager of the method of Fig. 8 and session manager of this 
variant method operate in similar fashion. Namely in a first mode, if a card insertion 

5 event is detected a session is commenced (eg the corresponding application is loaded and 
executed or an instance of the application is initiated), while if a card removal event is 
detected the session is terminated (eg the application is terminated or the instance of the 
application is terminated). In the second mode, if a card removal event is detected 
following receipt of a new card requested message, the session is not terminated but waits 

10 for the insertion of a second smartcard. If a card insertion event is detected following 
receipt of a new card requested message, and the newly inserted card satisfies the 
criterion specified, the session manager will read the newly inserted second smartcard. 

The method described with reference to Fig. 8 is concerned with an application 
waiting for the insertion of a specific non-controlling card. In a variation of this method, 

15 an application may instead specify any number of constraints for the cards for which it is 
waiting. These could include, without limitation, cards from a specific vendor, cards 
associated with a specific application or service, cards which specify conformance to a 
specific schema, cards specifying a creation date within a specific range, etc. An 
application may even specify that it is waiting for the insertion of any card (which may be 

20 used for example in the case of a card duplication application). 

The method described with reference to Fig. 8 is concerned with a method where 
only one non-controlling card is used. In a variation of this method, a controlling 
application may place a restriction that there only be one non-controlling card be inserted 
or it may set a specific limit on the number of non-controlling cards to be inserted in 

25 sequence or it may place no limit. For example, an "address book" card may be used for 
adding addresses to an electronic address book. The address book maintenance 
application may prompt the user to insert business cards (viz smartcards) so that the 
addresses they represent can be added to the address book. A user may insert any number 
of business cards in sequence and, when finished, insert the address book card again to 

30 indicate completion. 

The method described with reference to Fig. 8 is concerned with a method where 
the application specifically requests a non-controlling card and waits for the insertion of 
that card. In a variation of this method, the non-controlling card may be inserted at any 
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time during the running of the application without a specific request of that card from the 
application. In this variation of the method, the application initially advises the session 
manager of a list of IDs of all non-controlling cards that are allowed to be used by the 
application. When the controlling card is removed without a specific request by the 

5 application, the session manager first checks whether there are any IDs of allowable non- 
controlling cards in the list. If there are none, the session manager terminates the session. 
If there are some in the list, the method proceeds to step 810 and waits for the insertion of 
a non-controlling card. When the user inserts a card 818, the method then checks against 
the list whether the inserted card is an allowable non-controlling card, and if so proceeds 

10 to step 812. Otherwise it proceeds to decision block 816. The session is terminated once 
the controlling card is removed and no other card is inserted within a predetermined 
period. 

The method described with reference to Fig. 8 is concerned with a method where 
the non-controlling card is used for the reading of data. In a variation of this method, the 

15 non-controlling card can be used for any other purpose, including, without limitation, 
having data read from it, having data written to it, the initiation of an application in the 
context of the controlling application (for example, a Java applet running within a web 
page initially loaded by the controlling card), etc. In the latter case, the non-controlling 
card preferably has stored therein a command to load and execute the subsidiary 

20 application, by way of reference to the address of the subsidiary application stored in the 
processing device. 

In a still further variation of this method of Fig. 8, a non-controlling card 
associated with the main session can be used for the initiation of another sub-session, 
which in turn can require insertion of a non-controlling card. The method steps of the 

25 main session and sub-session operate in similar fashion, excepting that the method returns 
to the main session once the sub-session is terminated. 

A particular application of the method described with reference to Fig. 8, may be 
used in a system supporting the use of smartcards for access to electronic services. In 
such a system, a user may use a smartcard (the controlling smartcard) for accessing an 

30 electronic service (eg navigating through a list of products in an online shop, interacting 
with a television service, choosing a video to watch). When the user has made a selection 
of one or more items to purchase (eg physical items to be delivered such as books as well 
as electronic services to make use of such as online videos to watch), the system would 
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prompt the user to insert his or her "Personal Information Card" (ie the non-controlling 
card). 

The "Personal Information Card" is a card that has various details stored therein 
specific to the user including but not limited to: name, address, telephone number, and 
credit card number. 

The user is able to insert the "Personal Information Card" into the card reader 
and use it to enter whatever details they wish to convey to the electronic service. The 
entry of this information can be done by touching the transparent touchscreen on the 
smartcard reader. The "Personal Information Card" can have various fields (such as 
name, address, credit card) or the instantiated values (eg Mr. Smith) visible on the card 
itself, and the user can select the relevant information by touching over the appropriate 
visible indicia. Upon selection, the smartcard reader then reads the selected data from the 
smartcard and transmits this selected data to the application. The supplied information is 
then used by the system to complete the purchase 

In a further variation of this application, the user selects this information by 
some other means (eg having a menu presented to them which lists the available 
information read from the smartcard allowing them to choose which information should 
be given to the electronic service. 

In a still further variation of this application, when the user has made a selection 
of one or more items to purchase, the system would prompt the user to insert his or her 
conventional smartcard in the reader and obtains the relevant information from this 
conventional smartcard. 

In a still another variation of the aforementioned application, the system has an 
option for copying data from the Personal Information Card to the home shopping card. 
For example, if the home shopping card is to be used frequently, it may be more 
convenient to copy information from the Personal Information Card to the home- 
shopping card itself. This can be achieved in either of two ways. In the first way, the 
controlling card is the home shopping card and the non-controlling card is the Personal 
Information Card. The home shopping card is inserted and possibly used for viewing and 
ordering online products. After the selection of an option in the home shopping 
application, the application prompts for insertion of the Personal Information Card to 
copy personal information to the home shopping card. The user inserts the Personal 
Information Card and selects what information is to be copied, which is then temporarily 
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stored on the processing device. The application then prompts for the reinsertion of the 
home shopping card and the stored personal information details are then written to the 
home shopping card. In the second way, the controlling card is the Personal Information 
Card and the home shopping card is the non-controlling card. The Personal Information 
Card is inserted and the Personal Information application displays an option for copying. 
After the selection of the copying option, the user then selects the personal information 
which he or she wishes to copy, which is then temporarily stored on the processing 
device. The application then prompts for the insertion of the target card (ie home 
shopping card) and the stored personal information details are then written to the home 
shopping card. In both cases the home shopping card can be used in the future without 
access to the Personal Information Card. 

In another application of the method described with reference to Fig. 8, a system 
supporting voice or video communications can be operated using multiple smartcards. 
An initial smartcard, Card A, would be inserted which initiates the application. Card A 
might comprise an electronic representation of the user's contact details (name, address, 
etc) which is used by the application (for example, to put in the headers of message sent, 
or to identify the user in a videoconference). Where Card A is additionally being used as 
a user interface to the application (eg where the reader has a transparent touchscreen), the 
card would have controls for the various functions (eg to start recording a video messages 
and to stop recording). When a user wishes to communicate with somebody (eg send a 
message or start a live session), he or she inserts Card B, which is a business card, address 
card or some other card comprising an electronic representation of the person's address. 
In this context, Card B is being used as a non-controlling card. The address is extracted 
from Card B by the application requesting this information from the reader, which then 
reads the information from Card B. Alternatively, where Card B can be used as a user 
interface, the address is extracted by the user pressing over the appropriate part of Card B, 
which causes the reader to extract this information from Card B and send it to the 
application. Where a user wishes to communicate with multiple people simultaneously 
(eg a video e-mail sent to multiple people, a multi-party audio-conference, etc), multiple 
business cards or address cards can be inserted in sequence (Cards C, D, E and so on) 
with each selected person being added to the list of parties. The completion of the list 
would be indicated by the reinsertion of the controlling card (Card A) or by some other 
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means determined by the application (eg if there is a specific upper limit on the number of 
cards to be entered). 

In a further variation of the method shown in Fig. 8, the non-controlling card 
may comprise a single address or could comprise multiple addresses, which can be 

5 selected from by the user. The process of selection will depend on the nature of the 
application and the reader but could include selection over a particular position on the 
card through a transparent touchscreen, selection from a list of addresses extracted from 
the card and displayed on a screen, etc. 

The above mentioned method and variations thereof show that a non-controlling 

10 card can be used for various purposes including reading and writing of data. In a further 
variation of the method, a card that operates as a non-controlling card in a specific context 
(eg where a controlling card has specified that it is waiting for a card), may also operate 
as a controlling card in another context (eg where it is inserted when the card-reading 
system is waiting for a controlling card). For example, a smart business card could be 

15 inserted into a reader and used as a means of contacting the person described on the card. 
The business card could initiate an application, which allows a video-conference with that 
person to be initiated. This scenario involves it being used as a controlling card. 
However, in a different scenario, a generic video-conferencing control card may be in 
operation and the user wishes to add another participant to a conference. The user could 

20 place the business card for the person into the reader as a non-controlling card and initiate 
the person's involvement in the conference. 

In a further variation, the preferred method supports an adventure game. In this 
case, the controlling card, Card F, initiates a game and other cards represent characters, 
weapons, personality traits, locations or some other object or property. For example, 

25 insertion of Card F could initiate the application and display an imaginary world. Card F 
could then be removed and Card G, representing Character G could then be inserted and 
Character G would be displayed on the screen. Controls on Card G, seen and used 
through a transparent touch-screen, could be used to direct Character G through the 
imaginary world. Character G may discover objects (eg treasure) which a user can save 

30 onto Card G using the controls. If the user wants Character G to use Weapon H, the user 
would remove Card G and insert Card H resulting in a change to the display such that 
Character G is holding Weapon H. The application would inform the method of the 
constraints required to be satisfied for the application to stay active. For example, in the 
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case of this application, the application could inform the method that it is waiting for any 
card which is from the "AdventureGame" game made by the "GreatGames" game 
development company. This constraint information may be specified by the application 
in textual form as attribute/value pairs, using data conforming to a structured data format 

5 (such as XML), using registered numeric identifiers or by some other means. In this 
example, if a user were to insert Card X corresponding to a home shopping application 
which specifies Vendor Y, the method would recognise that this does not satisfy the 
constraints for the awaited card and would start the corresponding new application. 

There are clearly a large number of applications to which the preferred method 

10 and its variations thereof apply. These can include the following applications without 
being limited thereto. In particular application, the controlling card can be used as card- 
duplicating card. When the card-duplicating card is inserted, it initiates an application 
which prompts the user to insert the card being duplicated (the "Source Card"). When the 
user has done this, the application reads from the Source Card and then prompts for the 

15 insertion of the "Target Card". The user then inserts the Target Card and the saved 
contents from the Source Card are copied onto the Target Card. In another application, 
the controlling card, Card M, supports the searching or browsing of content (eg online 
music or images) and the purchase or retrieval of all or parts of this content. In this case, 
when a user requests purchase or retrieval of content, the application would prompt for 

20 the insertion of a card, Card N, or multiple cards, for the storage of the content or 
references to the content. After the content or reference to the content has been stored on 
Card N, Card N can now act as a controlling card in other contexts. For example, Card N 
could now be used in the absence of Card M for listening to the previously selected or 
purchased music. 

25 hi a further variation of the preferred method, the insertion of the non-controlling 

card leads to the execution of an application associated with this non-controlling card but 
which is run in a different mode or application context than that in which it would be run 
if the controlling application were not active. For example, a user may have a controlling 
card for an adventure game. This card, when inserted in a reader, starts the base 

30 application, which allows the user to play the adventure game. At some point in the 
game, the user may insert a card representing a set of weapons for a character to use. The 
insertion of this card in the context of the running application has the effect that the card 
is treated as a non-controlling card. In this case an application associated with the new 
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card (either resident on the card, referred to by the card, or associated by some other 
means with the identified card) would be started but it would be started in a non- 
controlling mode. For the card representing a set of weapons, for instance, the 
application running in a non-controlling mode may result in a selection box being 
5 presented to the user to allow them to select a weapon to use. This would differ from the 
behaviour of the application if running in a controlling context. The insertion of the same 
card being used as a controlling card would mean that the application would run in a 
controlling mode and exhibit different behaviour (eg start a weapon management 
application). 

10 Turning now to Fig. 11, there is shown a block diagram representation of a 

system for using multiple smartcards in accordance with a further embodiment. In this 
further embodiment, a smartcard reader 1 1 14 is connected by a data connection 1 126 to a 
processing device 1 128. The processing device 1 128 is provided with a display 1130 and 
memory device 1132. The processing device 1128 may be a set top box, a PC, ATM 

15 device, or any other device of computational ability, which is adapted to communicate 
with the smartcard reader 1114 and perform operations in response to user interaction 
with the smartcard and smartcard reader 1114. 

The smartcard reader 1114 has an access aperture 1118 through which a 
smartcard, eg. 1 100 can be inserted as depicted by an arrow 1 122. When the card 1 100 is 

20 so inserted, icons 1 108, 1 106 are made visible to a user through a control aperture 1 116, 
this accessibility being depicted by icon "ghosts" 1142, and 1144 respectively. The card 
1100 can be withdrawn from the smartcard reader 1114, and another card 1102 inserted 
as before, in which case an icon 1112 on this card 1102 is made accessible to the user 
through the control aperture 1116, as depicted by a ghost icon 1146. Each of these icons 

25 are associated with an action to be performed by the processing device 1128. A 
transparent pressure sensitive membrane is disposed over the control aperture 1116 and is 
adapted for user interaction with the icons. 

An "action" associated with an icon is preferably performed in the following 
manner. A desired smartcard (1100, 1102) is inserted into the smartcard reader 1114. 

30 The user selects the icon (1106, 1108, or 1112) by pressing that portion of the pressure 
sensitive membrane residing over the icon. The smartcard reader 1114 senses the 
location of the selected portion of the pressure sensitive membrane, and in turn transmits 
this information on the location of the selected portion to the processing device 1128. 
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The processing device 1128 determines the action to be performed that is associated with 
the selected icon using the location of the selected portion, and initiates the performance 
of the action. Preferably, the icon/action association is stored in a memory device 1110 
on the card 1100, and the smartcard reader 1114 is able to access the contents of the 
5 memory device 1 1 10 by means of suitable contacts (not shown) in the reader 1 14 which 
engage the memory device 1110 upon inserting the card 1100. The smartcard reader 
transmits the icon/action association to the memory device 1 132 of the processing device 
1128 upon insertion of the smartcard in the reader 1114. The cost of manufacturing 
smartcards is directly proportional to the size of the memory device 1110, and this 
10 memory device 1 1 10 is required to store icon/action associations for all icons 1 108 on the 
smartcard 1100. 

Preferably, this icon/action association is in the form of an interface description 
stored in the memory device 1110. This interface description lists x,y coordinates and 
one or more associated commands. When the user selects an icon by pressing the 

15 pressure sensitive membrane over the icon of the inserted card, the smartcard reader 
determines the x,y coordinates of the area of the pressure sensitive membrane that was 
pressed by the user and passes this information onto the processing device. The 
processing device then reads the list and matches the x,y coordinates of the list with the 
x,y coordinates of the pressed area and performs the one or more commands associated 

20 with the matched x,y coordinates. 

In this further embodiment of the system, instead of each smartcard being an 
isolated entity, storing icon/action associations in an on-board memory, a group of 
smartcards 1100, 1102, 1104 are configured to provide portable, programmable user 
interface capability. This group approach advantageously reduces memory requirements 

25 for "member" cards 1102, 1104, at the price of increasing memory capacity of a 
memory device 1110 in the single "base" card 1100. Accordingly, the base card 1100 
contains in the base card memory device 1 1 10, all the icon/action associations for the 
associated member cards 1 102, . . 1 104. The member cards 1 102, 1 104 need only store 
identity information, thereby significantly reducing the requirements for memory capacity 

30 in the member card memory device 1114. In aggregate, a relative manufacturing cost of 
smartcards in such a group is reduced in relation to the isolated smartcard approach. 

In this further embodiment of the system, the base card 1100 contains, in the on- 
board memory device 1110, icon/action association information for all associated 
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member cards 1102, 1104. This information is preferably in the form of interface 
descriptions comprising a plurality of records having at least the following fields: member 
identifier (MIN); x,y coordinates; and one or more associated commands. 

The base card also stores a group identifier number (GIN) which is specific to 

5 the particular group of which it is a base card. The base card also stores a member 
identifier number (MIN) unique to itself. The associated member cards 1102, 1104 
need only store the same GIN as the base card 1100, each member card also needing to 
store a MIN to identify itself. Once the base card 1100 is inserted into the smart card 
reader 1114, the icon/action association data, GIN and MIN relating to itself are stored in 

10 the system memory 1132 as depicted by the reference numeral 1134. Icon/action 
association data, GIN and MIN relating to associated member cards 1102, 1104 are 
stored in the system memory 1 132 as depicted by the reference numeral 1 136. The base 
card 1100 can, thereafter, be used as a user interface in its own right, through use of an 
icon 1108, for example. Alternatively, and in addition, the base card 1100 can be 

15 withdrawn from the reader 1114, and any one of the associated member cards 1102, 

1104 inserted into the reader 1114. Although these member cards 1102, 1104 contain 
only their associated GIN/MIN identifiers, they can nonetheless act as user interfaces, 
and, for example, a user can select the icon 1112 thereby affecting the corresponding 
action defined by the relevant icon/action association which was entered by means of the 

20 base card 1100. 

Accordingly, the system of the further embodiment relies on the concept of a 
group of cards comprising the base card 1100, and associated member cards 1102, 
1 104. This group can, typically, be related to a particular application. For example, such 
an application might be an electronic program guide, where the cards comprise a set of 

25 guides for twelve weeks of TV programs. All members of this group of cards share a 
common group identification number (GIN), which is stored in on-board memory in each 
card. One of the members of the group is designated as the base card, in the present case 
the card 1100. The base card 1100 has a member identification number (MIN) of zero. 
This base card 1 100 has a relatively large amount of memory, typically of the order of 4K 

30 bytes. The associated member cards 1 102, . . ., 1 104 have card-specific MINs that are not 
zero. The base card 1100 contains interface descriptions for all member cards 1102, 
1104 of the group, as well as an interface description for the base card itself. The 
member card interface descriptions are indexed by the corresponding MINs. 
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Turning now to Fig. 12, there is shown a flowchart of a method of using multiple 
smartcards in accordance with the further embodiment. The method 1200 commences at 
step 1201, where any currently stored data obtained from any previously inserted base 
cards is deleted. The method then waits 1202 for the insertion of a base card by a user. 

5 When a "first" card is inserted 1204 into the reader, the reader first checks 1203 whether 
the inserted "first" card is a base card. Specifically, the smartcard reader reads the 
inserted card and determines whether its value MIN is equal to zero. In the event the 
inserted card is not a base card the method issues 1205 a warning and returns to the 
waiting step 1202 for the insertion of a new "first" card. In the event the inserted card is a 

10 base card, then the reader 1114 reads from the memory storage of the base card the 
icon/action descriptions (ie the interface descriptions 136) for all the member cards in the 
group and stores 1206 them in memory 1132. The reader 1114 also stores 1206 the GIN 
value of the base card in the memory 1 132. The user may the commence user interaction 
with the base card if desired. 

15 When the base card 1 100 is ejected from the reader 11 14 and a "second" card is 

inserted 1208 in its place, the method checks 1210 whether the newly inserted "second" 
card is a base card. If another base card has been inserted, this will be indicated by a 
different GIN and an MIN of zero. In this event, the reader 1114 and associated 
processor 1 128 recognise that a new base card has been inserted, and the historic data 

20 associated with the previous base card 1 100 is then deleted, the method now focusing on 
the new base card and returning to step 1206 for storing information as was described for 
the previous base card 1 100. 

In the event the newly inserted card is not a base card, the method 1200 checks 
1212 whether the newly inserted card is a member card. If, instead of a new base card, a 

25 member card from the same group (eg. the member card 1102) is inserted 1208, the 
member card will have the same GIN, but a non-zero MIN. If this is indeed the case, the 
inserted member card 1 102 can then be used 1216 as a normal user interface. In the latter 
case, the MIN of the inserted "second" card is then used by the method to index into the 
interface description data 1 136 that has been stored in the memory 1132. When the user 

30 selects an icon by pressing the pressure sensitive membrane over the icon of the inserted 
card, the smartcard reader determines the x,y coordinates of the area of the pressure 
sensitive membrane that was pressed by the user and passes this information onto the 
processing device. The processing device then reads the list and matches the MIN value 
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and the x,y coordinates of the list with the MIN value of the inserted card and x,y 
coordinates of the pressed area and performs the one or more commands associated with 
the matched x,y coordinates and MIN values. 

If a member card of a different group is inserted 1208, the method will detect a 
5 different GIN to that presently in memory, and a non-zero MIN. The method thereby 
recognises that this an inappropriate card, and issues a warning 1314 such as an audible 
beep and returns to step 1208 waiting for the insertion of a new "second" card. The user, 
in this case, either inserts an appropriate base card, or a member card associated with the 
last inserted base card. 

10 The method terminates 1218, after the user completes the user interaction 1216. 

It is seen that member cards of a card group need only store two items of 
information, namely the group GIN and a personal MIN. These data can be stored in a 
relatively small amount of memory, typically 32 bits for the GIN, and 16 bits for the 
MIN, which is a total of only 48 bits. These member cards are, accordingly, significantly 

15 cheaper than a standard 4K bit card, which is now required only to support requirements 
of the single base card. As explained in the description however, a base card must be 
inserted before any associated member cards of a group can be used. 

A variation of the further embodiment, not directly involving provision of 
programmable user interfaces, comprises groups of electronically readable cards for 

20 accessing Automatic Teller Machines (ATMs), each such group usable by a family. This 
could be of particular interest to a family with young children who would appreciate and 
learn from the experience of having an operative ATM card while leaving an associated 
access code in the hands of their parents. In this embodiment, the parent inserts a base 
ATM card which identifies, to the ATM, the name of the relevant account. Thereafter, 

25 the parent enters the required Personal Identity Number (PIN) to provide access to the 
account. Subsequently, after the parent withdraws the base card from the ATM, each 
child having an associated member ATM card can insert their member card into the 
ATM, and withdraw funds. The ATM reads the relevant account name from the ATM 
card for each child, but does not need the PIN, which has already been entered by the 

30 parent using the base card. After the children have made their withdrawals for the day, 
the parent cancels the access by pressing an appropriate key on the ATM, and now the 
children's cards are no longer operative. 
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The method in accordance with the preferred embodiment or the further 
preferred embodiment is preferably practiced using a set top box, such as a VCR, DVD 
player or other domestic, service or industrial appliance. The set top box preferably 
comprises a microprocessor and associated memory for running the session manager and 
5 application(s). The set top box preferably has an input/output device interfacing the 
microprocessor and a transceiver so as to communicate with the smartcard reader. The 
microprocessor is also coupled to other functional units of the set top box for controlling 
the operation of these functional units. 

Alternatively, the method in accordance with preferred embodiment or the 

10 further preferred embodiment is be practiced on a general-purpose computer system 1300, 
such as that shown in Fig. 13 wherein the preferred methods are implemented as software 
executing within the computer system 1300. In particular, the preferred methods are 
effected by instructions in the software that are carried out by the computer. The software 
may be stored in a computer readable medium, including the storage devices described 

15 below, for example. The software is loaded into the computer from the computer 
readable medium, and then executed by the computer. A computer readable medium 
having such software or computer program recorded on it is a computer program product. 
The use of the computer program product in the computer preferably effects an 
advantageous apparatus for using multiple smartcards. 

20 The computer system 1300 comprises a computer module 1301, input devices 

such as a keyboard 1302 and mouse 1303, and output devices including a printer 1315 
and a display device 1314. A Modulator-Demodulator (Modem) transceiver device 1316 
is used by the computer module 1301 for communicating to and from a communications 
network 1320, for example connectable via a telephone line 1321 or other functional 

25 medium. The modem 1316 can be used to obtain access to the Internet, and other 
network systems, such as a Local Area Network (LAN) or a Wide Area Network (WAN). 
A signal receiver, such as 25, is used by the computer module 1301 for communicating to 
and from a smartcard reader 8 (not shown). Alternatively, a hardwire connection, such as 
126, can be used for communicating with the smartcard reader. 

30 The computer module 1301 typically includes at least one processor unit 1305, a 

memory unit 1306, for example formed from semiconductor random access memory 
(RAM) and read only memory (ROM), input/output (I/O) interfaces including a video 
interface 1307, and an I/O interface 1313 for the keyboard 1302 and mouse 1303 and 
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optionally a joystick (not illustrated), and an interface 1308 for the modem 1316. A 
storage device 1309 is provided and typically includes a hard disk drive 1310 and a 
floppy disk drive 1311. A magnetic tape drive (not illustrated) may also be used. A CD- 
ROM drive 1312 is typically provided as a non- volatile source of data. The components 
5 1305 to 1313 of the computer module 1301, typically communicate via an interconnected 
bus 1304 and in a manner, which results in a conventional mode of operation of the 
computer system 1300 known to those in the relevant art. Examples of computers on 
which the described arrangements can be practised include IBM-PC's and compatibles, 
Sun Sparcstations or alike computer systems evolved therefrom. 

10 Typically, the software implementing the preferred methods are resident on the 

hard disk drive 1310 and read and controlled in its execution by the processor 1305. 
Intermediate storage of the programs and any data fetched from the network 1320 may be 
accomplished using the semiconductor memory 1306, possibly in concert with the hard 
disk drive 1310. In some instances, the program may be supplied to the user encoded on 

15 a CD-ROM or floppy disk and read via the corresponding drive 1312 or 1311, or 
alternatively may be read by the user from the network 1320 via the modem device 1316. 
Still further, the software can also be loaded into the computer system 1300 from other 
computer readable medium including magnetic tape, a ROM or integrated circuit, a 
magneto-optical disk, a radio or infra-red transmission channel between the computer 

20 module 1301 and another device, a computer readable card such as a PCMCIA card, and 
the Internet and Intranets including email transmissions and information recorded on 
websites and the like. The foregoing is merely exemplary of relevant computer readable 
mediums. Other computer readable media may alternately be used. 

Industrial Applicability 

25 It is apparent from the above that the arrangements described are applicable to 

the use of smartcards and their related industries. 

The foregoing describes only some embodiments of the present invention, and 
modifications and/or changes can be made thereto without departing from the scope and 
spirit of the invention, the embodiment(s) being illustrative and not restrictive. For 

30 example, the aforementioned preferred method(s) comprise a particular control flow. 
There are many other variants of the preferred method(s) which use different control 
flows without departing the spirit or scope of the invention. Furthermore one or more of 
the steps of the preferred method(s) may be performed in parallel rather sequential. 



